Debian Security Advisory DSA 3184-1 (gnupg - security update)

Multiple vulnerabilities were discovered in GnuPG, the GNU Privacy Guard: CVE-2014-3591 The Elgamal decryption routine was susceptible to a side-channel attack discovered by researchers of Tel Aviv University. Ciphertext blinding was enabled to counteract it. Note that this may have a quite...

CVE-2014-6738

The Maccabi Tel Aviv aka com.monkeytech.maccabi application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Maccabi Tel Aviv aka com.monkeytech.maccabi application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6738

The Maccabi Tel Aviv aka com.monkeytech.maccabi application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6738

The CVE-2014-6738 entry concerns the Maccabi Tel Aviv Android app (com.monkeytech.maccabi) version 1.0, which does not verify X.509 certificates when communicating with SSL servers. The root cause is missing certificate validation, enabling man-in-the-middle attackers to spoof servers and access ...

Opentel Openmairie tel 1.02 Local File Include Vulnerability

No description provided by source. ============================================================ Opentel Openmairie tel 1.02 Local File Include Vulnerability ============================================================ + Opentel Openmairie tel 1.02 Local File Include Vulnerability...

Mobile Charger That Can Power-Up Your Smartphone in 30 Seconds

Going for a meeting or for a party and your Phone's battery discharged? Oops! Yes, I know this happens with most of us once in a day or I can rather say all of us. Smartphones are smart enough but not that smarter as expected keeping in mind today’s lifestyle. Phones are the basic necessity...

Kevin Mitnick joins the Zimperium team

Security firm Zimperium developer of Android app zANTI Android application Toolkit now have World Best Hacker "Kevin Mitnick" in their Team. In a Press Release ,Itzhak "Zuk" Avraham said "Zimperium is honored and excited to announce our newest member of the advisory board, world renowned hacker...

Design/Logic Flaw

The UIKit Alerts component in Apple iOS before 5 allows remote attackers to cause a denial of service device hang via a long tel: URL that triggers a large size for the acceptance dialog...

CVE-2011-3432

CVE-2011-3432 affects Apple iOS up to versions before 5.0, specifically the UIKit Alerts component. A malicious page can trigger a denial of service (device hang) by delivering an excessively long tel: URL that makes the acceptance dialog large. Root cause: an overly large maximum URI/text layout...

openstock/opentel 'dsn[phptype]' Parameter Local File Include Vulnerability

openstock/opentel is prone to a local file-include vulnerability because it fails to properly sanitize user supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may...

Opentel Openmairie tel 1.02 Local File Include Vulnerability

Exploit for php platform in category web applications ============================================================ Opentel Openmairie tel 1.02 Local File Include Vulnerability ============================================================ + Opentel Openmairie tel 1.02 Local File Include Vulnerabili...

Opentel Openmairie tel 1.02 Local File Include Vulnerability

============================================================ Opentel Openmairie tel 1.02 Local File Include Vulnerability ============================================================ + Opentel Openmairie tel 1.02 Local File Include Vulnerability...

Opentel Openmairie tel 1.02 - Local File Inclusion

============================================================ Opentel Openmairie tel 1.02 Local File Include Vulnerability ============================================================ + Opentel Openmairie tel 1.02 Local File Include Vulnerability...

Opentel Openmairie tel 1.02 - Local File Inclusion

Opentel Openmairie tel 1.02 - Local File Inclusion ============================================================ Opentel Openmairie tel 1.02 Local File Include Vulnerability ============================================================ + Opentel Openmairie tel 1.02 Local File Include Vulnerability...

Dan Geer, In-Q-Tel

Anyone who has ever had a single conversation with Dan, or even seen him speak, will understand immediately why he’s on this list. Dan’s as smart as they come he has a Ph.D. in biostatistics! and his widely varied background gives him a truly unique perspective on security issues. His talks and...

Facebook For iPhone Cross Site Scripting

Facebook for iPhone persistent XSS Facebook application for iPhone is not encoding special characters in Notes detail Adding this code in a note will freeze application: var x = 'x'; while 1 document.write''; x = x + 'x'; App page: http://www.facebook.com/apps/application.php?id=6628568379...

Apple iPhone Safari浏览器tel: URI处理拒绝服务漏洞

BUGTRAQ ID: 36386 CVE ID: CVE-2009-3271 iPhone是苹果发布的智能手机。 iPhone OS中内嵌的Safari浏览器在处理网页IFRAME元素SRC属性中的超长tel: URL时可能会崩溃。 Apple iPhone OS 3.0.1 厂商补丁： Apple ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.apple.com Apple Safari Iphone Crash using tel: Found by cloud :...

CVE-2009-3271

Apple Safari on iPhone OS 3.0.1 allows remote attackers to cause a denial of service application crash via a long tel: URL in the SRC attribute of an IFRAME element...

Apple Safari IPhone (using tel:) Remote Crash Exploit

No description provided by source. Apple Safari Iphone Crash using tel: Found by cloud : cloudatmadpowahdotorg http://blog.madpowah.org Tested on Iphone 3G, OS 3.0.1 Launch Safari, enter the page and after a few seconds Safari will crash and black screen will appear Exploit: ?php settimelimit0;...